If you find our resources valuable, please support us by making a small donation. Thank you!

x

Airlines & Travel

SCAM: Travel scams via email try to make the recipient believe they have paid for something they did not, or that they booked a trip, or requested an upgrade. Sometimes a notice of a boarding pass is sent. A mouse-over of any link in these emails will reveal that they do not point to the website they claim to represent. [View the lower left corner of each graphic.]

WHAT TO LOOK FOR: Besides looking at the link revealed in the lower left corner of most of these scams by a mouse-over, notice that these emails lack any personal information that identifies the recipient.

CAUTION: We do not advise visiting the links revealed in these scam emails because it is possible that some of these websites might cause a computer infection.

Downloading an attachment* is one of the most risky behaviors. The victim is likely installing malware onto his/her computer. We have heard from victims who happened to have a flight booked with the airline being represented in the scam, and therefore, clicked the link. If you are ever in doubt about the authenticity of the […]

SCAM: A mouse-over of any link in the email revealed that they did not point to American Airlines. [View the lower left corner of each graphic.] These emails were sent from fake email addresses made to look like US Airways. INVESTIGATION: Example #1: All links point to “kabeya.cc” “.cc” is the 2-letter country code for […]

SCAM: A mouse-over of any link in the email revealed that they did not point to American Airlines. [View the lower left corner of each graphic.] These emails were sent from fake email addresses made to look like US Airways. INVESTIGATION: Example #1: All links point to pick2kart.in. “.in” is the 2-letter country code for […]

Check out these 3 emails.  All say they are from Delta or American Airlines but the email addresses don’t match an airline.  Each email comes with an attached zip file.  The zip file contains malicious software called a Windows Trojan Injector.  You can read more about this type of malware at Microsoft’s website.

There is nothing about this email to offer any legitimacy that it comes from or leads to Southwest Airlines. Delete, delete, delete!

…Except you didn’t stay there! A mouse-over of the link for your reservation or hotel website points to an IP address of 103.30.135.108. A WHOIS look up of this IP address shows that it points to a server in Taipei, Taiwan. Doesn’t seem like Best Western to us.

s2Member®